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Generalised Bent Criteria for Boolean Functions (I) 



Constanza Riera, Matthew G. Parker 



Abstract 

Generalisations of the bent property of a boolean function arc presented, by proposing spectral analysis with respect 
to a well-chosen set of local unitary transforms. Quadratic boolean functions are related to simple graphs and it is shown 
that the orbit generated by successive Local Complementations on a graph can be found within the transform spectra 
■ under investigation. The flat spectra of a quadratic boolean function are related to modified versions of its associated 
f^i ■ adjacency matrix. 

<n : 

' I. Introduction 

G\ | It is often desirable that a boolean function, p, used for cryptographic applications, is be highly 
i- 1' nonlinear, where nonlinearity is determined by examining the spectrum of p with respect to (w.r.t.) 

H ■ 

hh the Walsh Hadamard Transform (WHT), and where the nonlinearity is maximised for those functions 
O .that minimise the magnitude of the spectral coefficients. To be precise, define the boolean function of 
n variables p : GF(2) n -> GF(2), and the WHT by the 2 n x 2 n unitary matrix U = H (g> H . . . <g> H = 
> :®E H, where the Walsh-Hadamard kernel H = j, ( | _J ) , indicates the tensor product of 
"^1" 'matrices, and unitary means that UlP = I n , where 'f means transpose-conjugate and I n is the 2 n x 2 n 
^ ! identity matrix. We further define a length 2 n vector, s = (so...oo, So...oi> S0...11, • • • , S1...11) such that 
^ Si = (— where i G GF(2) n . Then the Walsh-Hadamard spectrum of p is given by the matrix- 
""^5 I vector product P = Us, where P is a vector of 2 n real spectral coefficients, P^, where k G GF(2) n . 
. The spectral coefficient, P^, with maximum magnitude tells us the minimum (Hamming) distance, 
|d, of p to the set of affine boolean functions, where d = 2 n ~ 1 — 2 _ 2 _ |Pk|. By Parseval's Theorem, the 
^ , extremal case occurs when all P^ have equal magnitude, in which case p is said to have a flat WHT 

_ _ 1 

spectra, and is referred to as bent. If p is bent, then it is as far away as it can be from the affine 
functions [21] , which is a desirable cryptographic design goal. It is an open problem to classify all bent 
boolean functions, although many results are known [20], [SO], [13] . [2*T] . 

In this paper, we extend the concept of a bent boolean function to some Generalised Bent Criteria 
for a boolean function, where we now require that p has flat spectra w.r.t. one or more transforms from 
a specified set of unitary transforms. The set of transforms we choose is not arbitrary but is motivated 
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by the choice of unitary transforms that are typically used to action a local basis change for a pure n- 
qubit quantum state. We here apply such transforms to a n-variable boolean function, and examine the 
resultant spectra accordingly. In particular we apply all possible transforms formed from n-fold tensor 
products of the identity I — ( * ° V the Walsh-Hadamard kernel, H, and the Negahadamard kernel 

iV = ^= ^ | j , where i 2 — — 1. We refer to this set of transforms as the {J, if, iV} n transform 
set, i.e. where all transforms are of the form {/, H, N} n = (S^eRi Ij ®jeR H ®jeR N wnere the 
sets Ri, Rh and Rn partition {0, . . . , n — 1}, and ifj, say, is short for I® I® . . ,® I®H ® I®. . ,®I , with 
H in the j th position. There are 3 n such transforms which act on a boolean function of n variables to 
produce 3 n spectra, each spectrum of which comprises 2 n spectral elements (complex numbers). By 
contrast, the WHT can be described as {H} n , which is a transform set of size one, where the single 
resultant output spectrum comprises just 2 n spectral elements. 

A. The Quantum Context 

The choice of /, H, and N, is motivated by their importance for the construction of Quantum Error- 
Correcting Codes (QECCs). This is because J, H, and N are generators of the Local Clifford Group 
[TT] . which is defined to be the set of matrices that stabilize the group of Pauli matrices 1 which, 
in turn, form a basis for the set of local errors that act on the quantum code. This implies that the 
set of locally- equivalent n-qubit quantum states, that occur as joint eigenspectra w.r.t. {/, H, N} n , are 
equally robust to quantum errors from the Pauli error set. Stabilizer QECCs can also be interpreted 
as additive codes over GF(4) 

To evaluate the quantum entanglement of a pure n-qubit state one should really examine the spectra 
w.r.t. the infinite set of n-fold tensor products of all 2 x 2 unitary matrices (23 • Those states which 
minimise all spectral magnitudes w.r.t. this infinite transform set are as far away as possible from all 
generalised affine functions and can be considered to be highly entangled as the probability of observing 
(measuring) any specific qubit configuration is as small as possible, in any local measurement basis. 
However it is computationally intractable to evaluate, to any reasonable approximation, this continuous 
local unitary spectrum beyond about n = 4 qubits (although approximate results up to n = 6 are given 
in jHH])- Therefore we choose, in this paper, a well-spaced subset of spectral points, as computed by the 
set of {I, H, N} n transforms, from which to ascertain approximate entanglement measures. Complete 
spectra for such a transform set can be computed up to about n = 10 qubits using a standard desk-top 
computer, although partial results for higher n are possible if the n-qubit quantum state is represented 
by, say, a quadratic boolean function over n variables. 

1 The Pauli matrices are I , a x = ( ° ) , a z — ( °)> an d a y — icxVz- 
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B. The Graphical Context 

The graphical description of certain pure quantum states was investigated by Parker and Rijmen 
[2H]. They proposed partial entanglement measures for such states and made observations about a 
Local Unitary (LU) Equivalence between graphs describing the states w.r.t. the tensor product of 
2x2 local unitary transforms. These graphs were interpreted as quadratic boolean functions and it 
was noted that bipartite quadratic functions are LU-equivalent to indicators for binary linear error- 
correcting codes. It was further observed that physical quantum graph arrays are relevant to the work 
of [213 and were already under investigation in the guise of cluster states, by Raussendorf and Briegel 
[HE], [Oj- These clusters form the 'substrate' for measurement-driven quantum computation. 

Measurement-driven quantum computation on a quantum factor graph has been discussed by Parker 
|34j . Independent work by Schlingemann and Werner [3^, Glynn (22], [22], and by Grassl, Klappe- 
necker, and Rotteler [2H] proposed to describe stabilizer Quantum Error-Correcting Codes (QECCs) 
using graphs and, for QECCs of dimension zero, the associated graphs can be referred to as graph 
states. The graph states are equivalent to the graphs described by jHH] and therefore have a natural 
representation using quadratic boolean functions. 

In [23] it was observed that the complete graph, star graph, and generalised GHZ (Greenberger- 
Horne-Zeilinger) states are all LU-equivalent. It turns out that LU-equivalence for graph states can be 
characterised, graphically, via the Vertex- Neighbour- Complement (VNC) transformation, which was 
defined by Glynn, in the context of QECCs, in [22] (definition 4.2) and also, independently, by Hein, 
Eisert and Briegel |27j . and also by Van Den Nest and De Moor |44j . VNC is another name for Local 
Complementation (LC), as investigated by Bouchet [7j, [H], P in the context of isotropic systems. 
By applying LC to a graph G we obtain a graph G' , in which case we say that G and G' are LC- 
equivalent. Moreover, the set of all LC-equivalent graphs form an LC-orbit. LC-equi valence translates 
into the natural equivalence between GF(4) additive codes that keeps the weight distribution of the 
code invariant [TTj. There has been recent renewed interest in Bouchet's work motivated, in part, by 
the application of interlace graphs to the reconstruction of DNA strings [2], [2]- In particular, various 
interlace polynomials have been defined [2], PQ, [3], which mirror some of the quadratic results of 
part II of this paper j2H]- We point out links to this work in part II but defer a thorough exposition 
of these links to the future. 

C. The Boolean Context 

Spectral analysis w.r.t. {/, H, N} n also has application to the cryptanalysis of classical cryptographic 
systems [TJj. In particular, for a block cipher it models attack scenarios where one has full read/write 
access to a subset of plaintext bits and access to all ciphertext bits, (see for more details). The 
analysis of spectra w.r.t. {J, H, N} n tells us more about p than is provided by the spectrum w.r.t. 
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the WHT; for instance, identifying relatively high generalised linear biases for p [HZ] . In Part I of this 
paper our aim is to introduce these new generalised bent criteria. In Part II [39J we enumerate the 
fiat spectra w.r.t. {I, if, N} n and its subsets. We are trying to answer the question: which boolean 
functions are as far away as possible from the set of generalised affine functions as defined by the rows 
of {I,H,N} n ? 2 

The classification of bent quadratic (degree- two) boolean functions is well-known [3U] , and is facili- 
tated because the bent criteria is an invariant of affine transformation of the input variables. However, 
the classification of generalised bent criteria for a quadratic boolean function w.r.t. the {I, H, N} n 
transform set is new, and the generalised bent criteria are not, in general, invariant to affine transfor- 
mation of the inputs. This paper characterises these generalised bent criteria for both quadratic and 
more general boolean functions. We associate a quadratic boolean function with an undirected graph, 
which allows us to interpret spectral flatness with respect to { J, H, N} n as a maximum rank property 
of suitably modified adjacency matrices. We interpret LC as an operation on quadratic boolean func- 
tions, and as an operation on the associated adjacency matrix, and we also identify the LC-orbit with 
a subset of the flat spectra w.r.t. {I, H, N} n . The spectra w.r.t. {I, H, N} n motivates us to examine 
the properties of the WHT of all Z^-linear offsets of boolean functions, the WHT of all subspaces of 
boolean functions that can be obtained by fixing a subset of the variables, the WHT of all Z 4 -linear 
offsets of all of the above subspace boolean functions, the WHT of each member of the LC-orbit, and 
the distance of boolean functions to all Z 4 -linear functions. This leads us to prove the following: 

All quadratic boolean functions are bent^, I-bent and I-bent^. 
Not all quadratic boolean functions are LC-bent. 
All boolean functions are I-bent^. 
Not all boolean functions are bent^ or I-bent. 
There are no 'L^-bent or Completely I-bent^ boolean functions. 

where the above terms for generalised bent criteria will be made clear in the sequel. We are able to 
characterise and analyse the criteria for quadratic boolean functions by considering properties of the 
adjacency matrix for the associated graph state. 

D. Paper Overview 

For the interested reader, Appendix A reviews the graph state and its intepretations in the literature. 
In Section |H] we review LC as an operation on an undirected graph [22]; and provide an algorithm 

2 A row of Uo ® Ui ® . . . ® U H -i for Ui a 2 x 2 unitary matrix can always be written as u = (do, bo) ® ifli, 61) ® ■ ■ - ® (a n -i, b n -i), 
where at, bi are complex numbers. For a a r th complex root of 1, and m an integer modulus, we can approximate an unnormalised 
version of u by u ~ m(x)a p ^ x ', for some appropriate choice of integers s and r, where m : GF(2) n — > GF(s), p : GF(2) n — > GF(r), 
and x G GF(2) n , such that the } th element of it, Uj = m(j)a p ®, where j £ GF(2) n and itj is interpreted as a complex number. 
When u is fully-factorised using the tensor product then m and p are affine functions and we say that u represents a generalised 
affine function (see I35| . Section 5, for more details). 
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for LC in terms of the adjacency matrix of the graph. In Section ITTTl we show that the LC-orbit of a 
quadratic boolean function lies within the set of transform spectra w.r.t. tensor products of the 2x2 
matrices, /, y/—icr x , and y/ia z , where o~ x and a z are Pauli matrices. We also show, equivalently, that 
the orbit lies within the spectra w.r.t. {/, H, N} n . We show that doing LC to vertex x v can be realised 
by the application of the Negahadamard kernel, N, to position v (and the identity matrix to all other 
positions) of the bipolar vector (— l) p(x ), i.e. 

w V(x)+a(x)^_ 1 ^'(x) = ^(_!)P(x) = /®...®/®iV®J®...® / (-l)fW , 

where p(x) and p'(x) are quadratic, p'(x) is obtained by applying LC to variable x v , lu = \fi, and a(x) 
is any offset over Z 8 . In Appendix B we identify spectral symmetries that hold for p(x) of any degree 
w.r.t. {I, H, N} n . In Section ITVl we introduce the concepts of bent±, Z 4 -bent, (Completely) I-bent, 
LC-bent, and (Completely) I-bent^ boolean functions, and show how, for quadratic boolean functions, 
these properties can be evaluated by examining the ranks of suitably modified versions of the adjacency 
matrix. 

II. Local Complementation (LC) 

Given a graph G with adjacency matrix L, define its complement to be the graph with adjacency 
matrix L + / + 1 ( mod 2), where / is the identity matrix and 1 is the all-ones matrix. Let M{v) be 
the set of neighbours of vertex, v , in the graph, G, i.e. the set of vertices connected to v in G. 

Definition 1: Define the action of LC (or vertex-neighbour- complement (VNCJ) on a graph G at 
vertex v as the graph transformation obtained by replacing the subgraph G[J\f(v )] by its complement. 

By Glynn (see [22]); a self-dual quantum code [[n, 0, d]] corresponds to a graph on n vertices, which 
may be assumed to be connected if the code is indecomposable. It is shown there that two graphs G 
and H give equivalent self-dual quantum codes if and only if H and G are LC-equivalent. 

For a study of the group of compositions of local complementations, see [7], jU], |Hj, [H], which 
describe the relation between local complementation and isotropic systems. Essentially, a suitably- 
specified isotropic system has graph presentations G and G' iff G and G' are locally equivalent w.r.t. 
local complementation. 

A. LC in terms of the adjacency matrix 

Let p(x) : F£ —> F 2 be a (homogeneous) quadratic boolean function, defined by, 

p(x) = aijX l xi . 

0<i<j<n-l 

We can express p(x) by the adjacency matrix of its associated graph, F, such that T(i, j) = F(j, i) = aij, 
i < j, T(i,i) = 0. The LC operation on the graph associated to p(x) can be expressed in terms of 
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the adjacency matrix. Without loss of generality, we show how the matrix changes from T to To after 
doing LC on vertex xq- 



I 



r 



o 

aoi 
«02 
ao3 



am 


ai2 + aoiQo2 

<Zl3 + 001003 



ao2 

112 + 001002 



Cf23 + 002003 



ao3 

013 + aoi«03 

«23 + ^02003 





O-ln + aoiao : n-i 

fl2n + a02do : n-l 
d3ri + a03O0,n-l 



n 



,n— 1 dl,n — l ^Ol^O.n— 1 ^2,n— 1 ~t~ ^02<20,n— 1 ^3,n— 1 ~t~ ^03^0,71 — 1 ■ • 

The general algorithm, mod 2, is 

T v (i,j) = T(iJ) + T(v,i)*T(v,j), i < j, i, j = 1, 
r„(z, z) = Vz 

r u (j,i) = r„(z,j), «>i 

where F„ is the adjacency matrix of the function after doing LC to the vertex x v . 

III. Local Complementation (LC) and Local Unitary (LU) Equivalence 

Hein et al [2Zj state that LC- Equivalence (and therefore Local Unitary (LU) Equivalence) of graph 
states is obtained via successive transformations of the form, 



U V {G) 



-1(7, 



» 1/2 U [ 



(6)\l/2 



(1) 



where a x — ^ i o j and er^ = ^ o ) are Pauli matrices, the superscript (v) indicates that the 
Pauli matrix acts on qubit v (with / acting on all other qubits) 3 , and M v comprises the neighbours 
of qubit v in the graphical representation. Define matrices x and z as follows: 



x 



;-^) 1/2 



V2 v * 



and 



lia. 



,1/2 



w 
w 3 



where w = e 2m ^ 8 . Furthermore, let / = ( 1 

Define D to be the set of 2 x 2 diagonal or anti-diagonal local unitary matrices, i.e. of the form 
( o b) or (i! o ) ' ^ or some a anc ^ ^ ^ n ^- We make extensive use of the fact that a final multiplication 
of a spectral vector by tensor products of members of D does not change spectral coefficient magnitudes. 
In this sense a final multiplication by tensor products of members of D has no effect on the final 

.(g> I. 
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spectrum and does not alter the underlying graphical interpretation. For instance, applying x twice 
to the same qubit is the same as applying x 2 = ( ~* ^ , which is in D. Therefore we can equate x 2 

with the identity matrix, i.e. x 2 ~ I = ^ * ° J . Similarly, the action of any 2x2 matrix from D on 
a specific vertex is 'equivalent' the action of the identity on the same vertex. Note that z G D. The 
same equivalence holds over n vertices, so we define an equivalence relation with respect to a tensor 
product of members of D by the symbol 

Definition 2: Let u and v be two 2x2 unitary matrices. Then, 

u ~ v u — dv, d G D . 



This equivalence relation allows us to simplify the concatenation of actions of x and zona specific 
qubit. 

Remark: Note that u ~ v cannot be deduced from (and does not imply) u = vd for some d G D. 

We now show that the LC-orbit of an n-node graph is found as a subset of the transform spectra 
w.r.t. {/, x, xz} n . Subsequently, it will be shown that we can alternatively find the LC-orbit as a 
subset of the transform set w.r.t. {/, H, N} n . We then re-derive the single LC operation on a graph 
from the application of x (or N) on a single vertex. 

A. The LC-orbit Occurs Within the {I,x,xz} n Set of Transform Spectra 
We summarise the result of ((!} as follows. 

Lemma 1: Given graphs G and G' as represented by the quadratic boolean functions, p(x) and p'(x), 
then G and G' are in the same LC-orbit iff (— 1)p'( x ) ~ U Vt _ 1 U Vt _ 2 . . . U Vo (—l) p ^ for some series of t 
local unitary transformations, U Vi . 

From Lemma d we see that, by applying U V (G) successively for various v to an initial state, one can 
generate all LC-equivalent graphs within a finite number of steps. (It is evident from the action of 
LC on a graph that any LC-orbit must be of finite size). Instead of applying U successively, it would 
be nice to identify a (smaller) transform set in which all LC-equivalent graphs exist as the spectra, to 
within a post-multiplication by the tensor product of matrices from D. One can deduce from definition 
121 that zx ~ x, and it is easy to verify that 

Lemma 2: zxx ~ /, and xzx ~ zxz 
With these definitions and observations we can derive the following theorem. 

Theorem 1: To within subsequent transformation by tensor products of matrices from D, the LC- 
orbit of the graph, G, over n qubits occurs within the spectra of all possible tensor product combinations 
of the 2x2 matrices, /, x, and xz. There are 3 n such transform spectra. 

Proof: For each vertex in G, consider every possible product of the two matrices, x, and z. Using 
the equivalence relationship and lemma El 
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XXX ~ X zxx ~ I 

xxz ~ J zxz ~ xz 

xzx ~ zxz ~ xz zzx ~ x 

XZZ ~ ZXZZ ~ XZXZ ~ XXZX ~ X zzz ~ / . 

Thus, any product of three or more instances of x and/or z can always be reduced to /, x, or xz. 
Theorem ^ follows by recursive application of with these rules, and by noting that the rules are 
unaffected by the tensor product expansion over n vertices. ■ 
For instance, for n = 2, the LC-orbit of the graph represented by the quadratic function p(x) is 
found as a subset of the 3 2 = 9 transform spectra of (— w.r.t. the transforms I ® I, I <8> x, 
I (g> xz, x (8> I, x (8> x, x (8> xz, xz g) J, xz <8> x, and (g) xz. Theorem gives a trivial and very 
loose upper bound on the maximum size of any LC-orbit over n qubits, this bound being 3™. It has 
been computed in JH] that the number of LC-orbits for connected graphs for n = 1 to n = 12 are 
1,1,1,2,4,11,26,101,440,3132,40457, and 1274068, respectively (see also j2Zj, [23], [2H!, [IS!, S3)- 

5. The LC-orbit Occurs Within the {I,H,N} n Set of Transform Spectra 

One can verify that N ~ x and H ~ xz. Therefore one can replace x and xz with iV and H, 
respectively, so the transform set, {/, xz, x} becomes {/, H, N}. This is of theoretical interest because 
H defines a 2-point (periodic) Discrete Fourier Transform matrix, and iV defines a 2-point negaperiodic 
Discrete Fourier Transform matrix. In other words a basis change from the rows of x and xz to the 
rows of N and H provides a more natural set of multidimensional axes in some contexts. For t a 
non-negative integer, 

N 3t ~ I, N 3t+1 ~ N, N 3t+2 ~ H, N 2A = I , (2) 

so N could be considered a 'generator' of {I,H,N}. The {I,H,N} n transform set over n binary 
variables has been used to analyse the resistance of certain S-boxes to a form of generalised linear 
approximation in |3Z|. It also defines the basis axes under which aperiodic autocorrelation of boolean 
functions is investigated in [TZj. The Negahadamard Transform, {N} n , was introduced in j2H|. Con- 
structions for boolean functions with favourable spectral properties w.r.t. {H, N} n (amongst others) 
have been proposed in [HE] , and showed that boolean functions that are LU-equivalent to indicators 
for distance-optimal binary error- correcting codes yield favourable spectral properties w.r.t. {J, H} n . 

C. A Spectral Derivation of LC 

We now re-derive LC by examining the repetitive action of N on the vector form of the graph 
states, interspersed with the actions of certain matrices from D. We will show that, as with Lemma ^ 
these repeated actions not only generate the LC-orbit of the graph, but also generate the {/, H, N} n 
transform spectra. The LC-orbit can be identified with a subset of the flat transform spectra w.r.t. 



{I, H, N} n . Let s = ( — l) p ( x \ where p(x) is quadratic and represents a graph G. Then the action of 
N v on G is equivalent to U v s, where: 



U V ~U' V = I®---®I®N®I®---®I 
where N occurs at position v in the tensor product decomposition. Let us write p(x), uniquely, as, 

p(x) = a^A/^x) + q(x) , 

where g(x) and J\f v (x) are independent of x„ (A/"„(x) has nothing to do with the Negahadamard kernel, 
N v ). We shall state a theorem that holds for p(x) of any degree, not just quadratic, and then show 
that its specialisation to quadratic p(x) gives the required single LC operation. Express jV„(x) as the 
sum of r monomials, m»(x), as follows, 

r-l 

7V„(x) = y^mj(x) . 

i=0 

For p(x) of any degree, the rrij(x) are of degree < n — 1. In the sequel we mix arithmetic, mod 2, 
and mod 4 so, to clarify the formulas for equations that mix moduli, anything in square brackets 
is computed ( mod 2). The {0,1} result is then embedded in ( mod 4) arithmetic for subsequent 
operations outside the square brackets. We must also define, 

r-l 

A^(x) = ^K(x)] ( mod 4) . 

i=0 

Theorem 2: Let s' = U v s, where s = (— l) p ( x ) and s' = i p '( x \ Then, 



p'(x) = 2 



p(x) + ^m j (x)m fc (x) 



3j\^(x) + 3[x v ) ( mod 4) . (3) 



Proof: Assign to A and B the evaluation of p(x) at x v = and x v — 1, respectively. Thus, 

^ = p(*k=o = g(x) . 

Similarly, 

5 = p(x) Xv=1 = M L ,(x) + g(x) . 

We need the following equality between mod 2 and mod 4 arithmetic. 
Lemma 3: 

n n 

Y^iM ( m ° d 4 ) = + 2 E ( mod 4 ) where A * G z 2 • 

j=l i=l i/j 
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Observe the following action of N: 



i 

75 



i 

V2 



1 



1 

v/2 



1 i 
1 -« 



1 i \ / -1 



1 -i 
1 i 



1 -i / \ -1 



1 i 
1 -i 



1 

— t 
z 

-1 

—i 
1 

-1 



where w = e 2m ^ 8 . We ignore the global constant, w, so that N maps (— l) 00 to i 03 , (— l) 10 to i 12 , 
(-1) 01 to z 30 and (-1) 11 to i 21 . In general, for A,B e Z 2 , a )( 8G Z 4 , (-1)^ is mapped by jV„ to i afS , 
where, 

a = 2[y4fi] + [A] + 3[B] ( mod 4) 
/? = 2[AB] + 3L4] + [B] + 3 ( mod 4) 

Substituting the previous expressions for A and B into the above and making use of Lemma El gives, 



a(x) = 2[q(x)] + 3[JV„(x)] ( mod 4) 
/3(x) = 2[g(x)] + [KM] + 3 (mod 4) 



p'( x ) can now be written as, 



p'(x) = (3[x„] + l)a(x) + [x„]/3(x) ( mod 4) . 



Substituting for a and ft gives, 



p'(x) = 2[g(x)] + 2[xJ/ v (x)] + 3[jV„(x)] + 3[x„] ( mod 4) 



Applying Lemma El to the term 3[jV„(x)], 



3[A4(x)] = 2 
Furthermore, Lemma El implies that 



y^m j (x)m fc (x) 



+ 3AC(x) 



mod 4) 



i=l 



mod 4) = 2^[Aj]( mod 4) where A { e Z 2 



i=l 



For p(x) a quadratic function, A/"„(x) has degree one, so -A/^(x) is a sum of degree-one terms over 
Z4. Therefore the Z4 degree-one terms, A/^(x) and 3[ be eliminated from (J3J) by appropriate 



11 



subsequent action by members of {D} n to s'. As all monomials, m^x), are then of degree one, (JHJ) 
reduces to, 

p'(x) ~ p(x) + XjXk ( mod 2) . (4) 

(0J) precisely defines the action of a single LC operation at vertex v of G, where we have used ~ to 
mean that (-I)p'W = BU(-l) p{ *\ for some fully tensor-factorisable matrix, U, and some B £ {D}™. 
As p'( x ) i s a l so quadratic boolean, we can realise successive LC operations on chosen vertices in G via 
successive actions of N at these vertices, where each action of N must be interspersed with the action 
of a matrix from {D}™ to eliminate Z 4 -linear terms from (J3J). In particular, one needs to intersperse 
with tensor products of y * ° J and ^ * J . 

Theorem 3: Given a graph, G, as represented by s = (— l) p ( x \ with p(x) quadratic, the LC-orbit of 
G comprises graphs which occur as a subset of the spectra w.r.t. {/, H, N} n acting on s. 
Proof: Define D\ C D such that 

^i={(: :)'(: :) i -=^=±i} . 

Similarly, define D 2 C D such that 

D 2 = {(° l)J° l) | a = l,6 = ±z}> where z 2 = -l. 



Then it is straightforward to establish that, for any Ai,A^ £ Di, any A2,A' 2 £ D 2 , and any c £ 
-1, -?'}, 

A^Ai = cA'tJV fl"Ai = cA\H 

5 

iVA 2 = cAiH HA 2 = cAiiV . 

Let A* £ Di IJ-D2- Then, for a vertex, succesive applications of A^iV can, using (JHJ), be re-expressed 

as, 

]J(A*N) =cA, J]iV~ JJiV . 

But, from (J2J), successive powers of iV generate /, H, or N, to within a final multiplication by a member 
of D. It follows that successive LC actions on arbitrary vertices can be described by the action on 
s of a member of the transform set, {/, H, N} n , and therefore that the LC-orbit occurs within the 
{/, H, N} n transform spectra of s. ■ 

D. LC on Hypergraphs 

For p(x) of degree > 2, A/"«(x) will typically have degree higher than 1, and therefore the expansion 
of the sum will contribute higher degree terms. For such a scenario we can no longer eliminate the 
nonlinear and non-boolean term, A/^(x), from the right-hand side of (J3J) by subsequent actions from 
D. Therefore, it is typically not possible to iterate LC graphically beyond one step. We would like 
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to identify hypergraph equivalence w.r.t. local unitary transforms, in particular w.r.t. {/, H, N} n . 
Computations have shown that orbits of boolean functions of degree > 2 and size greater than one do 
sometimes exist with respect to {J, H, N} n , although they appear to be significantly smaller in size 
compared to orbits for the quadratic case ^7] . 

An interesting open problem is to characterise a 'LC-like' equivalence for hypergraphs. 

Further spectral symmetries of boolean functions w.r.t. {/, H, N} n are discussed in Appendix B. 

IV. Generalised Bent Properties of Boolean Functions 

A. Bent Boolean Functions 

A bent boolean function can be defined by using the WHT. Let p(x) be our function over n binary 
variables. Define the WHT of p(x) by, 

P k = 2~ n/2 (-l) p(x)+k ' x , (6) 

xeGF(2)" 

where x, k G GF(2) n , and • implies the scalar product of vectors. 

The WHT of p(x) can alternatively be defined as a multiplication of the vector (— l) p ( x ) by 
H <g) H ® . . . ® H. Thus, 

n-l 

P = 2- n/2 (H ® H <g> . . . <g> #)(-l) p(x) = 2" n/2 ((g) #)(-l) p(x) , (7) 

i=0 

where P=(P ( o,...,o),...,P(i,...,i))eC 2n . 

p(x) is defined to be bent if \P k \ = 1 Vk, in which case we say that p(x) has a flat spectra w.r.t. the 
WHT. In other words, p(x) is bent if P is flat. 

Let r be the binary adjacency matrix associated to p(x) when p(x) is a quadratic. 

Lemma 4 : (SO] 

p(x) is freni <^ T has maximum rank, mod 2 . 

It is well-known (HD] that all bent quadratics are equivalent under affine transformation to the boolean 
function ? = q X2iX2i+\ j + c • x + d for n even, where c G GF(2) n , and d G GF(2). More generally, 
bent boolean functions only exist for n even. It is interesting to investigate other bent symmetries 
where affine symmetry has been omitted. In particular, in the context of LC, we are interested in the 
existence and number of flat spectra of boolean functions with respect to the {H, 7V} n -transform set 
(bent^), the {/, iJ} n -transform set (I-bent), and the {J, H, iV} n -transform set (I-bent^). In the following 
subsections we investigate the bent4, Z 4 -bent, (Completely) I-bent, LC-bent, and (Completely) I-bent4 
properties of connected quadratic boolean functions, where affine symmetry is omitted, and make some 
general statements about these properties for more general boolean functions. 
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B. Bent Properties with respect to {H, N} n 

We now investigate certain spectral properties of boolean functions w.r.t. {H, N} n , where {H, N} n 
is the set of 2 n transforms of the form (8)jeR H Hj (8)jeR N fy, "where the sets Rh and Rn partition 
{0,...,n-l}. 

The following is trivial to verify: 

p(x) is bent p(x) + k ■ x + d is bent , 

where k £ GF(2) n and d £ GF(2). In other words, if p(x) is bent then so are all its affine offsets, mod 
2. However the above does not follow if one considers every possible Z 4 -linear offset of the boolean 
function. The WHT of p(x) with a Z 4 -linear offset can be defined as follows. 

Pk,c = 2~ n/2 (2) 2[p(x)+k ' x]+[c - x] k, c £ GF(2) n . (8) 

xGGF(2)" 

Definition 3: 

p(x) is bent 4 <=> 3c such that |P kiC | = 1 Vk £ GF(2) n . 
Let Rn and Rh partition {0, 1, . . . , n — 1}. Let, 

U = (g) H 3 ; (g) Nj . 
j'eR-H j€Rn 

s ' = i/(-l)pW . (9) 

Lemma 5: p(x) is bent4 if there exists one or more partitions, Rn, Rh such that s' is flat. 

Proof: The rows of U can be described by where x = (xq, x±, . . . , x n ,_i), where / is linear, 

/ : GF(2) n -> GF(4), and the coefficient of Xj in / £ {0,2} for j £ R H and / £ {1,3} for j £ R N . 
Therefore s' can always, equivalently, be expressed as s' = ((^) H)(i) 2p ^ + ^ Wl, where /' is linear, 
/' : GF(2) n -> GF(2), and the coefficient of ^ in /' is for j £ R H , and 1 for j £ R N . ■ 
An alternative way to define the bent 4 property for p(x) quadratic is via a modified form of the 
adjacency matrix. 

Lemma 6: For quadratic p(x), 

p(x) is bent 4 <^ T v has maximum rank, mod 2, for some v £ GF(2) n . 
where T v is a modified form of Y with Vi in position [i, i], where v = (f , v±, . . . , f n -i)- 
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Proof: We first show that the transform of (— l) p ( x ) by tensor products of H and N produces a 
flat spectra if and only if the associated periodic and negaperiodic autocorrelation spectra have zero 
out-of-phase values. We then show how these autocorrelation constraints lead directly to constraints 
on the associated adjacency matrix. 

Consider a function, p, of just one variable, x , and let s = (— l) p ( x °). Define the periodic autocor- 
relation function as follows, 

a k = (-l) p(xo)+p(a:o+fc) , k G GF(2) . 

x £GF(2) 

Then it is well-known that s' = Hs is a flat spectrum if and only if a k = for k ^ 0. 
Define the negaperiodic autocorrelation function as follows, 

b k = (-l) p ^ +p( - X0+k ^ X0+1 \ k G GF(2) . 

x GGF(2) 

Then s' = Ns is a flat spectrum if and only if b k = for k ^ 0. (For p a boolean function of just one 
variable, Hs is never flat and Ns is always flat, but this only holds for one variable). 

We now elaborate on the above two claims. Define s(z) = so + s±z, a(z) = ao + a\z, and 
b(z) = b + b\z. Then the periodic and negaperiodic relationships between autocorrelation and fourier 
spectra, as claimed above, follow because periodic autocorrelation can be realised by the polynomial 
multiplication, a(z) = s(z)s(z' 1 ) mod {z 2 — 1), with associated residue reduction, mod (z — 1) and mod 
(z + 1), realised by s' = Hs — ^= y | j j s (with the Chinese Remainder Theorem realised by Ws', 
where 'f means transpose conjugate). By Parseval, s' can only be flat if a\ = 0. Similarly, negaperi- 
odic autocorrelation can be realised by the polynomial multiplication, b(z) = s(z)s(z~ l ) mod (z 2 + 1), 
with associated residue reduction, mod (z — i) and mod (z + i), realised by s' = Ns — \ _* J s 
(with the Chinese Remainder Theorem realised by N's'). By Parseval, s' can only be flat if b\ = 0. 

We extend this autocorrelation «-> Fourier spectrum duality to n binary variables by defining multi- 
variate forms of the above polynomial relationships. If we choose periodic autocorrelation for indices 
in Rh and negaperiodic autocorrelation for indices in Rn, we obtain the autocorrelation spectra, 

A k ,R H ,R N = (-l) P(X)+P(X+k)+E ^ 1X -N^^ + 1 ) , (10) 

xeGF(2)™ 

where k = (k , ki, . . . , k n -i) G GF(2) n , and x R (i) is the characteristic function of Rn, i-e, 



1, % G Rn 
0, i £ R N 
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In polynomial terms, with z G GF(2) n and s(z) = ^je&F(2) n s i YTi=o z l\ we have, 

^Rh,Rn( Z ) = X] ^k,R H ,R N II ^ 

keGF(2)™ i=0 

n— 1 x / 

= s(zb^i,...,^-i)s(^o 1 ^r 1 ,---^«ii)mod n^ 2 -(" 1 ) XRN(i) ) • 

i=0 

Then, by appealing to a multivariate version of Parseval's Theorem, s' as defined in © is flat if and 
only if A kjRH)RN = 0, V k ^ 0. 

These constraints on the autocorrelation coefficients of s translate to requiring a maximum rank 
property for a modified adjacency matrix, as follows. The condition Ak,R Hi R N = for k ^ is equiva- 
lent to requiring that, if we compare the function with its multidimensional periodic and negaperiodic 
rotations (but for the identity rotation), the remainder should be a balanced function. When dealing 
with quadratic boolean functions, the remainder is always linear or constant. This gives us a system 
of linear equations represented by the binary adjacency matrix, T, of p(x), with a modified diagonal, 
that is with = 1 for all i G Rn, and T^j = otherwise. Let 

p(x , Xi, . . . , a; n _i) = a 01 x xi + a 02 x x 2 H h a^XiXj H h a n _ 2)n _ x x n _ 2 x n _ x ■ 

Therefore, 

p(x) + p(x + k) + J]"^ 1 x Rn (i)A^ar< = A; (Xr n (0)x + a oi^i + ^2^2 H h a ,n-iaV-i) 

+ /Ci(a lX + Xr n (1)^1 + a 02^2 H h ao,n-i^n-i) H 

(ao.n-i^o H 1- a n _ 2 ,n-ia:n-2 + Xr n (" - • 

This is equal to: 

x o(x Rn (0)fc + 001*1 H h a 0n k n ) + 2i(a i&;o + x Rn H ai, n -iAv»-i) 

H h a; n _i(ao,n-i*o + ai,n-i*i H 1" an-2,n-i*n-2 + Xr n - l)A;„_i) , 

which is balanced unless constant. The constant ^27=0 Xr n (^)^« wm n °t play any role in the equation 
Ak = 0, and can be ignored. We have the the following system of equations: 

Xr n (0)/k) + aoifa + 002^2 H h a ,„.-iA;„.-i = 

aoi^o + X Rn (1)^1 + «i2^2 H h ai jn _iA; n _i = 



ao,n-ik + ai, n -i*i H h a n _ 2 , ri -iA; ri -2 + Xr n (« ~ l)*n-i = . 

Writing this system clS cl matrix, we have: 

( X Rn (°) a 01 O02 ■ ■ ■ Oo,n-l ^ 

a 01 Xr n (1) Ol2 ■■■ Ol,n-l 

ao2 012 Xr n ( 2 ) ■■■ o 2 , n -i 

y oo.ti-1 Oi,n-i a 2i „_i ... x Rn (n — 1) y 
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This is a modification of T, with 1 or in position i of the diagonal depending on whether i G Rn 



In general, 

p(x) is bent p(x) is bent 4 . 

4= 

Theorem 4- All boolean functions of degree < 2 are bent4. 
Proof: Degree zero and degree one functions are trivial. Consider the adjacency matrix, T, 
associated with the quadratic boolean function, p(x). We now prove that T v has maximum rank (mod 
2) for at least one choice of v, where T v = T + diag(v) as before. Let M be the minor associated with 
the first entry of T; in other words, let r = f ^ j . 

We prove by induction that there exists at least one choice of v such that T v has maximum rank 
(mod 2). The theorem is true for n = 2: in this case, r = ( ) . 



Then, either det(r) = 1, in which case we choose v = (0, 0), or we have a = (empty graph). In the 
last case we choose v = (1, 1), so det(T v ) = 1 + a = 1. Suppose the theorem is true for n—1 variables. 
We will see that it is true for n variables. If the determinant of V is 1 we take v = (0, . . . , 0) and we 
are done. If det(r) = 0, then we have two cases: 
. det(M) = 1: Take v = (1, 0, . . . , 0). 

• det(M) = 0: By the induction hypothesis there is at least one choice of v(M) G GF(2)™ -1 , where 
v(M) = (vi, . . . , iv_i) such that M V ( M ) has full rank. Let v' = (0, v±, . . . , G GF(2) n . If det(T v /) = 
1 we have finished. If det(r v /) = we are in the first case again, so we take v = (1, vi, . . . , f n -i), and 
we are done. 

The theorem follows from lemma El I 
Remark: Theorem 0] is true even for boolean functions associated with non-connected or empty 
graphs. 

Lemma 7: Not all boolean functions of degree > 2 are bent4. 

Proof: Counter-example - by computation there are no bent4 cubics of three variables. ■ 
Further computations show that there are no bent4 boolean functions of four variables of degree > 2. 
Similarly, there are only 252336 bent4 cubic boolean functions in five variables (out of a possible 
2 20 — 2 10 , not including affine offsets), and no bent4 boolean functions of degree > 4 in five variables. 
bent4 cubics of six variables do exist. Lemma [7| identifies an open problem: 



or % G R- 



H- 




What is the maximum algebraic degree of a bent^ boolean function of n variables? 



Definition 4-' 



p(x) is Z 4 -bent |P k)C | = 1 Vc, k G GF(2) 



n 
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The definition requires that all Z^-linear offsets of the boolean function, p(x), are flat w.r.t. the WHT. 
WE prove that no such boolean functions exist, first for all boolean functions of degree < 2, and then 
for all boolean functions. 

Theorem 5: There are no Z4-bent boolean functions of degree < 2. 
Proof: This is trivial for degree zero and degree one functions. Consider the adjacency matrix, 
T, associated with the quadratic boolean function, p(x). The theorem is equivalent to proving that 
there is a v such that T v has rank less than maximal. Then: 

1. if p(x) is not bent, then we take v = (0, . . . , 0) and we are done. 

2. if p(x) is bent, we take M as in the proof for Theorem HJ If det(M) = 1, we take v = (1, 0, . . . , 0) 
and we are done; if det(M) = 0, modify the diagonal as in the proof for Theorem^] If the determinant 
of the new matrix is equal to 0, we are done; if not, we are in case 1. 

■ 

Theorem 6: There are no Z4-bent boolean functions. 
Proof: Consider the proof of Lemma El We have established that, for a fixed choice of Rh and 
Rn, s', as defined in (JHJ), is flat if and only if Ai^Rh.Rn = 0> ^k, k ^ 0. Therefore p(x) is Z 4 -bent 
iff ^4k,R H ,R.N = 0' ^k, k 7^ 0, for all partitions {Rh,Rn}- In particular, if p(x) is Z4-bent, then the 
polynomials, t4 RhRn (z), as defined in (fTTj) . satisfy A RhRn (z) = 2 n for all choices of Rh and Rn 
(i.e. their out-of-phase coefficients are all zero). By the Chinese Remainder Theorem (CRT) we can 
combine these polynomials for each choice of Rh and Rn to construct the polynomial, 

n 

r(z) mod J](4 - 1) = CRT{A Rh , Rn (z) | VR h ,R N } , (12) 

3=0 

where r(z) = s(z , z x , . . . , z^s^ \ zf 1 , . . . , z~l x ). 

But as r(z) comprises monomials containing only z~ , z°, zj, the modular restriction in ([T2|) has no 
effect on coefficient magnitudes, and 

n 

r(z) = r(z) mod TT(^| _ 1) • 

3=0 

to within a multiplication of the coefficients by ±1. It follows, by application of the CRT to (fT2"|) that, 
if A RhjRn (z) = 2 n , VRh, Rn, then r(z) = 2 n also, i.e. r(z) is integer. But this is impossible as the 
coefficients of the maximum degree terms, |"J . zj l 3 , uj E Z 2 , in r(z) can never be zero, but are always 
±1. Therefore p(x) can never be Z,4-bent. ■ 
Remark: Although we proved for boolean functions, it is possible to generalise the proof so as to 
state that no function from GF(2) n — > GF(g) can be Z 4 -bent, for any even integer q. 
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C. Bent Properties with respect to {I, H} n 

We now investigate certain spectral properties of boolean functions w.r.t. {/, H} n , where {J, H} n 
is the set of 2 n transforms of the form <S>j eRl Ij (S> je R H Hji where the sets Ri and Rh partition 
{0, . . . , n — 1}. jHS] has investigated other spectral properties w.r.t. {/, H} n , such as weight hierarchy 
if the graph is bipartite. 

The WHT of the subspace of a function from GF(2) n to GF(2), obtained by fixing a subset, Ri, of 
the input variables, can be defined as follows. Let 9 £ GF(2) n be such that 9j — 1 iff j £ Rj. Let 
r ^ 9, where means that 9 'covers' r, i.e. < Vi. Then, 

Pk,^ = 2~ (n ~ wt(e))/2 ^ (_ 1)P (x)+k.x k ^e,r^9 . (13) 

x=r+y|y^0 

Definition 5: 

p(x.) is I-bent <£> 30 such that |P k , r ,0| = 1 Vk^#,Vr^#, 

where wt(#) < n. 
Let 

ieRi j'eR H 
s ' = [/(-l)P(x) . 



(14) 
(15) 



Definition 6: p(x) is I-bent if there exist one or more partitions, Rj, Rh such that s' is flat, where 
|Ri| < n. 

An alternative way to define the I-bent property of p(x) is via its associated adjacency matrix, T. 
Let Ti be the adjacency matrix obtained from T by deleting all rows and columns of V with indices in 
Ri. 

Lemma 8: For quadratic p(x), 

p(x) is I-bent Tj has maximum rank, mod 2 

for one or more choices of Ri where |Rj| < n. 
In general, 

p(x) is bent £>( x ) is I-bent . 

Theorem 7: All boolean functions in two or more variables of degree < 2 are I-bent. 
Proof: Degree zero and degree one functions are trivial. It is easy to show that all quadratic 
boolean functions of 2 variables are I-bent. The theorem follows by observing that all adjacency 
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matrices, T, representing quadratic functions of n > 2 variables contain 2x2 submatrices, obtained 
from T by deleting all rows and columns of T with indices Ri, for |Ri| = n — 2. ■ 
Lemma 9: Not all boolean functions of degree > 2 are I-bent. 

Proof: Counter-example - by computation there are no I-bent cubics of three variables. ■ 
Further computations show that there are only 416 I-bent cubics in four variables, and no I-bent 
quartics in four variables. There are only 442640 I-bent cubics, only 1756160 I-bent quartics in five 
variables, and no I-bent quintics in five variables. I-bent cubics in six variables do exist. Lemma El 
indicates an open problem: 

What is the maximum algebraic degree of an I-bent boolean function of n variables? 

Definition 1: 

p(x) is Completely I-bent <^> |-Pk,r,e| = 1 V0, k, r, k ^ (9, r ^ 9 . 

Theorem 8: There are no Completely I-bent boolean functions. 
Proof: Let s = (— l) p ^. Let |Ri| = n — 1. Then for U as defined in (|14[) . s' cannot be flat. ■ 

D. Bent Properties with respect to {I, H, N} n 

The {H, jV} n_ ' Rl ' set of transforms of the subspace of a function from GF(2) n to GF(2), obtained 
by fixing a subset, Ri, of the input variables, is defined as follows. Let 9 e GF(2) n be such that 6j = 1 
iff j G Ri. Let r ^ 9. Then, 

iV, r , 9 = 2-("- wt W)/ 2 Yl (*) 2[p(x)+k ' xl+[c - xl k, c ^ 9, r ^ 9 . (16) 

x=r+y|y^e 

Definition 8: 

p(x) is I-bent A 3c, 9 such that |Pk,c,r,e| = 1 Vk -< 9, Mr -< 9 , 

where wt(9) < n. 

Let Ri, Rh and R N partition {0, 1, . . . , n — 1}. Let, 

jeRi jeR H j'eR N 

s ' = u(-iyw . (is) 

Lemma 10: p(x) is I-bent4 if there exists one or more partitions, Ri,Rh,Rn such that s' is flat, 
where |Ri| < n. 
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As a generalization of (jlOjl . we get flat spectra for one or more partitions Ri, Rh, Rn iff 

Wa. = E (-i) p(x)+p(x+k)+E -' x - N (i) ^ (:Cl+1) =0, Vk ^ , 

x=r+y|y^6 

where 0j = 1 iff j G Ri, r ^ and rj = kj if j G Ri. 

An alternative way to define the I-bent4 property when p(x) is quadratic is via its associated adja- 
cency matrix, T. Let Tj v be the matrix obtained from T v when we erase the i th row and column if 
i G Ri. 

Lemma 11: For quadratic p(x), 

p(x) is l-bent4 -v=> F/ v has maximum rank, mod 2, where v ^ 9 

for one or more choices of v and 9 where wt(9) < n. 
In general, 

=>■ p(x) is bent4 =>- 
p(x) is bent p(x) is I-bent 4 . 

p(x) is I-bent ^= 

Theorem 9: All boolean functions of degree < 2 are I-bent4. 

Proof: Follows from Theorems 0] and ■ 

Lemma 12: All boolean functions are I-bent4. 

Proof: From Theorem El the action of a single U v on a boolean function, p(x), of any degree, 

always gives a flat output spectra, for any value of v. This gives (at least) n flat spectra for any 

boolean function. ■ 

Definition 9: 

p(x) is Completely I-bent^ <^ |i\ jCj r,e| = 1 V0, c, k, r, k, c ^ 9, r ^ . 



Theorem 10: There are no completely I-bent4 boolean functions. 
Proof: Follows from theorems El or |H1 I 

It is natural to ask whether, for a given quadratic, p(x), there exists at least one member of its 
LC-orbit which is bent. If so, then we state that the graph state, p(x), and its associated LC-orbit, is 
LC-bent. More formally, 

Definition 10: The graph state, p(x) (a quadratic boolean function), and its associated LC-orbit is 
LC-bent if 3 p'(x) such that p'(x) G LC-orbit (p(x)), and such that p'(x) is bent. 
For example, the bent function xoXi + xqx 2 + xox^ + x\x 2 + x\x^ + 22^3 is in the same LC-orbit as 
x Q Xi + XqX 2 + x x 3 so, although x Xi + x x 2 + XqX% is not bent, it is LC-bent. 

In general, for p(x) quadratic, 

p(x) is bent p(x) is LC-bent . 

4= 
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Theorem 11: Not all quadratic boolean functions are LC-bent. 
Proof: By computation, the LC-orbit associated with the n = 6-variable boolean function, 
+ X1X5 + x 2 x 5 + X3X4 + X4X5 is not LC-bent. ■ 
By computation it was found that all quadratic boolean functions of n < 5 variables are LC-bent. 
Table I lists orbit representatives for those orbits which are not LC-bent, for n = 2 to 9, and provides 
a summary for n = 10, where the boolean functions are abbreviated so that, say, ab, de, fg is short for 
x a %b + Xd%e + x f x g- F° r those orbits which are not LC-bent we provide the maximum rank satisfied 
by a graph within the orbit. 



2-5 
G 
7 
8 



10 



ANF for the orbit representative 



04,15,25,34,45 

07,17,27,37,46,56,67 
06,17,27,37,46,56,67 
07,17,25,36,46,57,67 
06,17,27,36,45,46,47,56,57,67 
07,16,26,35,45,47,67 
08,18,28,38,47,57,67,78 
08,18,26,37,47,56,68,78 
08,19,29,39,49,58,68,78,89 
51 other orbits 



Max. Rank within Orbit 



TABLE I 

Representatives for all LC-Orbits which are not LC-bent for n = 2 to 10 



V. Conclusion 

This paper has examined the spectral properties of boolean functions with respect to the transform 
set formed by tensor products of the identity, /, the Walsh-Hadamard kernel, H, and the Nega- 
hadamard kernel, N (the {/, H, N} n transform set). In particular, the idea of a bent boolean function 
was generalised in a number of ways to {J, H, N} n . Various theorems about the generalised bent prop- 
erties of boolean functions were established. It was shown how a quadratic boolean function maps to a 
graph and it was shown how the local unitary equivalence of these graphs can be realised by successive 
application of the LC operation - Local Complementation - or, alternatively, by identifying a subset 
of the flat spectra with respect to {/, H, N} n . For quadratic boolean functions it was further shown 
how the {/, H, N} n set of transform spectra could be characterised by looking at the ranks of suitably 
modified versions of the adjacency matrix. In the second part of the paper, we will apply this method 
to enumerate the flat spectra w.r.t. {/, H} n , {H, N} n and {J, H, N} n for certain concrete functions 
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VI. Appendix A - Various Interpretations of the Graph States 



In this section we briefly characterise graph states. 

A. Interpretation as a Quantum Error Correcting Code 

Let £ be a 2n-dimensional binary vector space, whose elements are written as (a\b), where 
a, b G GF(2) n , and E is equiped with the (symplectic) inner product ( (a 1 6) , {a'\b')) — a ■ b' + a' ■ b. 
Define the weight of (a\b) = (a\, . . . , a n \bi, . . . , b n ) as the number of coordinates % such that at least 
one of the a, or 6j is 1. The distance between two elements (a\b) and (a,'\b') is defined to be the weight 
of their difference. 

Theorem 12: Let S be a (n — k) - dimensional linear subspace of E, contained in its dual S 1 - 
(with respect to the inner product), such that there are no vectors of weight < d in S \ S x . By 
taking an eigenspace of S (for any chosen linear character) we obtain a quantum error-correcting code 
mapping k qubits to n qubits that corrects [(d — 1)/2] errors. Such a code is called an additive quantum 
error- correcting code (QECC), and is described by its parameters, [[n, k, d]\, where d is the minimal 
distance of the code. 

We show, later, that a [[n, 0, d}] QECC can be represented by a graph. First we re-express the QECC 
as a GF(4) additive code. 

B. Interpretation as a GF(A) Additive Code 

From pi] we see how to interpret the binary space E as the space GF(4) n and thereby how to derive 
a QECC from an additive (classical) code over GF(4) n . Let GF(A) = {0, with uo 2 = uo + 1, 

u 3 = 1; and conjugation defined by Co = uo 2 = uo+1. The Hamming weightof a vector in GF(4) n , written 
wt(u), is the number of non-zero components, and the Hamming distance between u,u' G GF(4) n is 
dist(w, u') = wt(u + u'). Define the trace function as: tr(x) : GF(4) — > GF(2), tr(x) = x + x. To each 
vector v = (a\b) G E we associate the vector (j>(v) = au + buo. The weight of v is the Hamming weight 
of 4>(v), and the distance between two vectors in E is the Hamming distance of their images. If S is 
a subspace of E then C = 4>(S) is a subset of GF(4) n that is closed under addition (defining thus an 
additive code). The trace inner product of u, v G GF(4) n is 



n 





i=l 



Define the dual code C as 



C ± = {u G GF(4) n : u * v = G C} . 



Now one can reformulate Theorem Il2l 
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Theorem 13: Let C be an additive self-orthogonal subcode of GF(4) n , containing 2 n ~ k vectors, such 
that there are no vectors of weight < d in C \ C L . Then any eigenspace of _1 (C) is a QECC with 
parameters [[n, k,d]}. 

By Glynn (see j22], [22]), we have: Let S be a stabilizer matrix, that is (n — k) x n over GF(4) and 
such that its rows are GF(2)-linearly independent. Then we define a QECC with parameters [[n, k, d]] 
as the set of all GF(2)-linear combinations of the rows of S. The code is self-dual when k = 0. 

C. The QECC as a Graph 

Assume that each column of S contains at least two non-zero values, for the columns that do 
not have this property may be deleted to obtain a better code. Following j22], a self-dual quan- 
tum code [[n, 0, d]] corresponds to a graph on n vertices, which may be assumed to be connected 
if the code is indecomposable. Let PG(m, q) be the finite projective space defined from the vec- 
tor space of rank m + 1 over the field GF(g). Then, the Grassmannian of lines of PG(n — 1,2), 
G*i(PG(n — 1,2)), regarded as a variety immersed in PG(^ ™ J, 2) is as follows: each line ij is 
defined by two points, and b{. We associate to the set of lines all products aibj + afii, i ^ 
j (mod2). Define a mapping from a column of an n x n stabilizer matrix S over GF(4) to a vec- 



tor of length 
a,be GF(2) n . 



with coefficients in GF(2): We write each column over GF(4) as a + bu, where 



/ xi \ 

■>'2 



( ai \ 

a 2 



\ x n J \ a n J 



( h \ 

b 2 

V b n J 



Taking all the 2x2 subdeterminants found when we put the two vectors into a matrix, we get the 
points of the Grassmannian. A point in Gi(PG(n — 1, 2)) = a line in PG(n — 1, 2) = a column of length 
n over GF(4) (with at least two different non-zero components). A quantum self-dual code [[n, 0,d]] 
corresponds to some set of n lines that generate PG(n — 1,2). As each line of PG(n — 1, 2) corresponds 
to a (star) kind of graph, the set corresponds to a graph in n vertices. 

D. Interpretation as a Modified Adjacency Generator Matrix over GF(2) and GF(4) 

From any connected graph we obtain an indecomposable code. Let T be the adjacency matrix of a 
graph G in n variables. Then, Gt = (/ | T) (where / is the n x n identity matrix) is the generator 
matrix of a binary linear code [4*3| . In other words, 
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/ 1 o 
1 



Gn 



aoi 
a i 



\ ... 1 a 0n air 



din 



generates a code over GF(2) n . We can further interpret Gt as a generating matrix of a code over 
GF(4) n , as follows [D]: 



/ 



g = r + ujI = 



u a i 
Ooi w 



/ 



is the generating matrix of an additive code over GF(4) n . Different graphs may define the same 
code, but this relation is 1-1 with respect to LC-equivalence between graphs, as defined in section ITT1 

E. Interpretation as a Modified Adjacency Matrix over Z4 

Define from a graph with adjacency matrix, T, the generating matrix of an additive code over 
as 2r + /. This code has the same weight distribution over as T + ujI over GF(4) n . Once again, 
LC-equivalent graphs define equivalent Z 4 codes. 

F. Interpretation as an Isotropic System 

The graph state can also be viewed as an isotropic system (see [7], [§], [Ej, [52"]). 

Let A be a 2-dimensional vector space over GF(2). For x,y G A, define a bilinear form, <, >, by 



< x,y >- 



1 if x 7^ y, x ^ and y ^ 
0, otherwise 



Let V be a finite set. Define the space of GF(2)-homomorphisms A v : V — > A. Define in this 
GF(2)-vector space a bilinear form as: 

for 0, i/j G < (j), i/j >= < ^(^iipiv) > (mod 2) . 

Definition 11: Let L be a subspace of A v . Then, / = (V,L) is an isotropic system if dim (L) = |V| 
and < (fi,ip >= W 4>,tp £ L. 

For a graph G, V((j) denotes the set of vertices of G. If u G V(G), J\f(v) denotes the neighbourhood 
of vertex v, that is, the set of all its neighbours. For P C V, we set M{P) = ^2 ve p-N"(v). Let 
if = {0, x, y, z} be the Klein group, which is a 2-dimensional vector space, and set K' = K \{0}. Note 
that x + y + z = 0. 
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Lemma 13: ( 9j) Let G be a simple graph with vertex set V. Let <fi,ip G K such that 
cj)(y) ^ ^(u) G V, and set L = {0(P) + ip{N{P)) : P C V}. Then 5 = (V, L) is an isotropic 
system. 

The triple II = (G, 0, ^) is called a graphic presentation of S\ 

For G if 17 , we set = {0(P) ■ P C V}. is a vector subspace of i^ 17 . 

Definition 12: For ^> G K' v , the restricted Tutte-Martin polynomial m(S,ip;x) is defined by 

m(J, ^; x) = ^(z - l) dim ( Lu ?) , 

where the sum is over G K' v such that 0(w) 7^ ip(v), v G V. 

Theorem 14: (0) If G is a simple graph and / is the isotropic system defined by a graphic presen- 
tation (G,(f>,ip), then 

q(G;x) = m(I,(j) + ip;x) , 

where q(G; x) is the interlace polynomial of G. 

We mention the interlace polynomial and its relation to our work in Part II of this paper [39J. 

G. Interpretation as a Quadratic Boolean Function 

Let p(x) : GF(2) n — > GF(2) be a quadratic boolean function, defined by its Algebraic Normal Form 
(ANF), p(pc) = J2o<i<j<n-i a ij xtx '' + Y^7=o ^i x i + Y^=o c i ■ We associate to p(x) the non-directed 
graph that has variables as vertices (and vice- versa) jUS] The adjacency matrix, T, associated to p(x), 
satisfies T(i,j) = T(j,i) = a^, i < j, T(i,i) = 0. 

H. Interpretation of a Bipartite Quadratic Boolean Function as a Binary Linear Code 

Quadratic ANFs, as represented by bipartite graphs, have an interpretation as binary linear codes 
|35j : Let Tc, T c ± be a bipartite splitting of {0, . . . , n — 1}, and let us partition the variable set x as 
x = x c U x c ±, where x c = {xi : i G T c }, and x c x = {x{ : i G T c ±}. Let p(x) = £) fc g fc (x c )r fe (x c x), 
where deg(gfc(xc)) = deg(rfc(x c ±)) = 1 Vfc (clearly, such a function corresponds to a bipartite graph), 
and let s(x) = (— l) p(x ). Then the action of the transform (^) igT Pj, with T = Tc or T c ±, on s(x) 
gives s'(x) = m(x), with m the ANF of a Boolean function, s' is the binary indicator for a binary 
linear [n,n — |T|, d] error correcting code. 4 

VII. Appendix B - Further Spectral Symmetries of Boolean Functions with 

respect to {/, H, N} n 

The power spectrum of the WHT of a boolean function is invariant to within a re-ordering of the 
spectral elements after an invertible affine transformation of the variables of the boolean function 

4 There is also an equivalent interpretation of bipartite graphs as binary matroids (e.g. \12\ ). 



28 



5 . This implies that bent boolean functions remain bent after affine transform (see Section llVl for a 
discussion of bent properties). However, the set of {I , H, N} n power spectra are not an invariant of 
affine transformation. In this section we ascertain for which binary transformations (other than LC) 
the power spectra of the {/, H, N} n transform remains invariant to within a re-ordering of the spectral 
elements within each spectrum. We refer to the complete set of 3 n x 2 n power spectral values w.r.t. 
{J, H, N} n as Sihn- Moreover, 'invariance' is to within any re-ordering of the 3" x 2™ spectral elements. 
From the discussion of sections IlII- Al and IIII-BI it is evident that Sihn of a quadratic boolean function 
is LC-invariant. However the LC-orbit is not the only spectral symmetry exhibited with respect to 
Sihn- We identify the following symmetries. 

Lemma 14 ■ Let p(x) be a boolean function of any degree. Then Sihn of p(x) and Sihn of p(x) +/(x) 
are equivalent, where I is any affine function of its arguments. 

Lemma 15: Let p(x) be a boolean function of any degree over n variables. Then Sihn of p(x) and 
Sihn of p(x + a) are equivalent, where a e GF(2) n . 

Proof: Replacing Xj with Xj + 1 within any p(x) is equivalent to the action of the 'bit-flip' 
operator, a x = ^ ° * J, at position j of the transform on (— l) p( - x \ applying / in the rest of the 
positions. 

We can rewrite Ho~ x as follows, 



"'■ = 7iU "'A' °) = ^° -A- -J = U " = 

In other words, a bit-flip (or periodic shift) followed by the action of H is identical to the action of 
H followed by a 'phase-flip'. (This is well-known to quantum code theorists). The final phase-flip is 
a member of the set D (see Section 11111 for a definition of D) so does not change the magnitude of 
the spectral values produced by H . Therefore the power spectra produced by H is invariant to prior 
periodic shift. 

We can rewrite Ncr T as follows, 





: 











Na r . = ^ ( 1 \ ) ( u : ) = ( u : ] ( : • . i = ( \\n = -<t„n 



-i 



where a y is one of the four Pauli matrices. In other words, a bit-flip (or periodic shift) followed by the 
action of iV is identical to the action of iV followed by a member of the set D. Therefore the power 
spectra produced by iV is invariant to a prior periodic shift. 

The above argument is trivial with respect to /. The argument extends naturally to any n- 
dimensional tensor product of /, H, and N. ■ 

Let p(x) be a boolean function of any degree over n variables. We perform a combination of affine 
offset and periodic shift on p(x) by the following operation: 

p(x) =>• p(x + a) + c ■ x + d , 

5 The power of the k th spectral element, Pk, is given by |Pfc| 2 , where Pk is defined in ©. 
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where a, c G GF(2) n , d G GF(2), and '•' is the scalar product. 

The symmetries generated by affine offset and periodic shift include all symmetries generated by any 
combination of periodic and negaperiodic shift, because we perform periodic and negaperiodic shifts 
on p(x) by the following operation: 

p(x) =>- p(x + a) + c • x + wt(c), c ^ a , 

where a, c G GF(2) n , 'c ^ a' means that q < Qj, Vz (i.e. a covers c), and wt(c) is the binary weight 
of c. The one positions in a identify variables x« which are to undergo periodic or negaperiodic shift, 
and the one positions in c identify the variables X{ which are to undergo negaperiodic shift. The 
combined periodic and negaperiodic symmetry induced by {I, H, N} n implies an aperiodic symmetry, 
as discussed further in [TT] . 



